inteligent SNAT with iRule

hello

 

 

we tried again ....

 

 

 

Our scenario is like first you described:

 

 

We configured a snat pool and use this snat pool in a snat list, so normally

 

snat is done. then we configured a rule in the virt. server to disable the snat.

 

the dest. ip we try to connect is 2.2.2.16

 

 

 

I have tested your rule two times with different effect.

 

 

The two possibilities of the rule:

 

 

 

(1) If I configure the rule with a "mask"-statement

 

 

--------------------------------------------------------------

 

when CLIENT_ACCEPTED {

 

if {[IP::addr [IP::local_addr] equals "2.2.2.0 mask 255.255.255.0"]} {

 

snat none

 

}

 

}

 

--------------------------------------------------------------

 

I don't have any matches on my criterias, the snat is still done !!

 

===>>> the rule doesn't work correctly

 

 

 

(2) If I configure the rule instead of the "mask"-statement only with a host IP

 

 

--------------------------------------------------------------

 

when CLIENT_ACCEPTED {

 

if {[IP::addr [IP::local_addr] equals "2.2.2.16"]} {

 

snat none

 

}

 

}

 

--------------------------------------------------------------

 

The snat is turned off.

 

===>>> The rule works fine ???!!!

 

 

 

So ....

 

I have two questions:

 

 

 

Do you use Version 9.0.3 ??

 

 

And do you use the rule really with a "mask"-statement?